Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File:                     WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier:          e3AFtFFkoFFy5RTUNJYjvXl0FPpsEYhrx5F6SySE3hI=
Subject key identifier:   0D:57:80:D4:B4:F9:3C:47:5D:CB:91:A8:5B:19:CC:16:83:27:D8:01
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer:       /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial:       019F916D92ACD95F19B237526377FAD6B079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 00:01:45 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:45 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:45 +0000
Files and hashes:         1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: SykKvbqyqPzE4Ayux0ddFLD+fHMjtYe1+DyZxaxxSsk=)
                          2: mlSBu9TMzRv1cMksxUNnCbKCFl0.roa (hash: 2BjuTtcqQP3+XgVLMLJcS2zD2YXPkZIw27QDfsAhCoI=)
                          3: q8bxI4KwUJabKAhcIRxGXIBY40U.roa (hash: ptYSizJNQ3Kc8/zLMIQuVYyw+eoexSAPxfZlEWXvP/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:92:ac:d9:5f:19:b2:37:52:63:77:fa:d6:b0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
        Validity
            Not Before: Jul 24 00:01:45 2026 GMT
            Not After : Jul 25 00:01:45 2026 GMT
        Subject: CN=0d5780d4b4f93c475dcb91a85b19cc168327d801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:05:32:33:23:a7:26:f3:f5:bf:f7:cc:ee:
                    24:17:70:14:c6:49:40:a5:55:8d:bd:11:56:c6:e1:
                    71:84:1a:81:88:e8:43:1d:16:30:ba:9f:0e:62:1d:
                    52:2f:8e:ce:5b:22:d5:4b:56:29:20:3e:d3:0d:ab:
                    13:45:bd:7e:aa:6c:43:43:6b:eb:f5:f8:e6:36:33:
                    41:d4:49:44:7f:ef:4f:9e:0d:b9:34:09:fa:10:87:
                    17:1c:fb:54:c0:ff:b5:7c:8d:29:5e:7d:40:7c:97:
                    17:81:dc:c1:28:d7:84:63:cb:01:65:74:a6:39:24:
                    05:ee:de:ba:36:63:dd:a8:a0:f9:72:fa:0d:7a:24:
                    68:c6:a4:94:31:00:19:67:52:a9:2a:fb:39:12:26:
                    e7:1e:a2:d5:b2:d0:81:df:79:a0:45:48:6b:c2:68:
                    ba:f6:ad:9b:d8:78:f9:84:da:a7:57:0e:54:06:41:
                    c2:1b:e4:c6:db:e2:2c:70:24:60:67:e1:0b:75:9b:
                    30:2b:e2:3b:38:3c:54:4c:2a:7a:3d:d0:1c:36:aa:
                    29:06:1b:dc:50:d0:34:12:f6:d2:6e:40:db:36:7a:
                    12:3f:d5:96:21:42:df:89:b1:8e:86:2f:de:38:a0:
                    ee:3e:50:60:6b:33:67:ed:15:24:3e:e3:20:e8:c5:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:80:D4:B4:F9:3C:47:5D:CB:91:A8:5B:19:CC:16:83:27:D8:01
            X509v3 Authority Key Identifier:
                keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b2:9a:e6:b7:97:97:68:ec:bf:0e:17:38:40:6b:a0:04:7b:
         85:9b:38:82:48:ed:d0:2c:04:dc:af:24:96:89:0e:c5:85:05:
         50:e6:b6:2e:4c:5e:58:05:58:81:3d:06:64:eb:47:98:c9:44:
         c4:c6:d6:a9:07:97:64:af:05:52:f0:76:f6:37:00:b9:41:4e:
         3a:d6:a3:6c:74:20:e5:50:d5:ea:59:3d:eb:21:42:95:e5:61:
         66:e8:57:33:6d:c3:c7:a6:62:f3:61:3b:62:45:f5:b4:d4:0f:
         22:5d:28:3c:a3:68:07:2d:99:d9:53:fe:1f:33:71:29:c0:95:
         8a:19:cb:31:d8:1a:5a:9b:94:86:3c:b0:ba:a1:ee:4b:1b:39:
         74:f8:9b:b3:e0:82:b2:01:8e:52:a7:f9:b6:8a:68:bd:2e:77:
         ac:24:ab:f7:93:f2:ca:5f:c0:60:2d:5a:f1:96:79:e6:79:3d:
         84:de:13:2e:7b:32:27:05:13:f3:fd:dd:b3:50:ed:88:d9:24:
         d2:7c:f4:58:7b:18:b2:91:e0:a7:55:8f:5f:90:37:0e:a1:d0:
         cb:8f:9d:b5:46:75:65:8d:66:e6:cf:06:e5:10:f3:a1:45:ec:
         56:64:7b:75:81:f6:68:1c:31:88:e7:31:44:f9:48:d6:0f:59:
         a5:2a:20:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:57:13 2026 by rpki-client